ZKSoftware ZK-I01 A ID Unauthorized Access Vulnerability

Bugtraq ID:	69212
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 08 2014 12:00AM
Updated:	Aug 08 2014 12:00AM
Credit:	Infobyte Security Research
Vulnerable:	ZKSoftware ZK-I01 A ID 0
Not Vulnerable:

ZKSoftware ZK-I01 A ID Unauthorized Access Vulnerability

ZKSoftware ZK-I01 A ID is prone to an unauthorized-access vulnerability.

Successful exploits will allow attackers to gain access to the application and obtain sensitive information.

ZKSoftware ZK-I01 A ID Unauthorized Access Vulnerability

The researcher who discovered the issue has created a proof of concept. Please see the references for more information.

ZKSoftware ZK-I01 A ID Unauthorized Access Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

ZKSoftware ZK-I01 A ID Unauthorized Access Vulnerability

References:

• Perverting Embedded Devices - ZKSoftware Fingerprint Reader (Part I) (Infobyte )
  
• ZK-I01 ID Homepage (ZKSoftware )